
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a455dd01-9d1c-3f67-be86-99d30a672de5.roa
File: a455dd01-9d1c-3f67-be86-99d30a672de5.roa (raw, json)
Hash identifier: uXQxSki2y44Q3IN7AoAFd5NmzhIFeaQlVSK37Mo46Xc=
Subject key identifier: E8:32:B5:1F:49:FE:0F:E9:50:68:C4:34:E8:D6:DF:F3:D3:EC:C8:FA
Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial: 010D0C9F4328584CF58799E413224522EB7A6900
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a455dd01-9d1c-3f67-be86-99d30a672de5.roa
Signing time: Mon 23 Feb 2026 14:00:41 +0000
ROA not before: Mon 23 Feb 2026 14:00:41 +0000
ROA not after: Sun 24 May 2026 13:00:41 +0000
asID: 16417
IP address blocks: 23.90.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:f5:87:99:e4:13:22:45:22:eb:7a:69:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Validity
Not Before: Feb 23 14:00:41 2026 GMT
Not After : May 24 13:00:41 2026 GMT
Subject: CN=d8de5448-a3a7-4d29-b94b-59bbc94d5189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:18:15:83:a6:5f:7f:13:7b:c6:a6:86:a8:6b:
40:d2:bc:6b:5f:4e:03:0f:69:ce:f7:62:12:1d:8c:
23:c2:34:40:e8:ba:46:db:7a:25:5a:2c:b6:43:67:
c3:62:b0:d1:46:d3:b9:b1:f3:dc:b2:f2:22:31:c0:
2d:28:49:7d:8a:79:77:de:a2:03:2b:b2:61:65:51:
b1:87:99:25:7a:b7:03:33:81:ca:93:cf:b0:43:0b:
59:ca:9d:5c:63:49:5e:3d:c1:b8:18:65:2f:e2:9c:
69:df:5b:f2:f2:49:b3:3e:0d:6f:c0:b6:e3:29:aa:
2b:f4:2d:23:ba:30:fb:87:91:42:ea:b8:8b:8e:f9:
a2:24:2b:28:af:b2:91:6a:10:41:94:9e:da:0c:03:
7c:5e:8f:3b:22:3c:5d:53:96:59:2e:c2:b4:e5:eb:
91:ff:f1:88:84:5f:9f:f1:df:97:34:a5:13:f8:2d:
b6:b6:b3:bb:1c:85:73:10:19:d6:0c:57:ac:32:38:
7d:3b:23:5a:85:7c:e2:03:3b:59:98:79:c2:05:ea:
30:e8:7a:17:59:61:7d:33:a6:94:e1:ff:3e:4c:d6:
73:f7:37:ae:fa:af:93:57:08:4c:79:f8:40:be:bc:
a8:7d:57:f5:8a:99:f8:14:eb:ec:1d:ca:7d:36:5b:
53:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:32:B5:1F:49:FE:0F:E9:50:68:C4:34:E8:D6:DF:F3:D3:EC:C8:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a455dd01-9d1c-3f67-be86-99d30a672de5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
X509v3 Authority Key Identifier:
keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
sbgp-ipAddrBlock: critical
IPv4:
23.90.125.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bb:28:c4:c3:00:86:32:2b:fc:34:b3:25:38:32:35:ea:4e:eb:
e9:73:7c:27:1e:57:8e:85:a6:c2:6a:3f:cf:69:19:d1:45:fd:
4e:f5:99:b6:88:7a:94:81:2a:41:b9:59:f4:4d:d4:d7:50:00:
cd:c3:9a:6d:c7:6f:12:ad:5a:9a:ad:21:8d:c2:e4:b1:0f:02:
f3:4b:ba:c3:1b:8d:f7:54:4c:0d:68:17:24:2e:95:8d:54:7a:
07:53:dd:31:f4:23:f3:df:71:9d:f9:6c:ad:15:20:6d:4f:78:
f9:a9:73:db:d1:49:15:a4:f6:d1:76:01:05:c3:fe:a4:a2:38:
21:80:97:3f:50:a0:3f:15:3e:01:7b:32:f4:db:87:51:1f:ec:
e4:fb:27:18:b1:29:15:fe:2d:e9:6d:ef:1d:7e:c9:c8:8c:fb:
42:9b:9d:f3:37:85:74:12:f3:7f:6a:eb:c7:ba:84:e5:d7:4d:
8b:1c:f7:8c:0e:85:1c:d5:88:db:f3:0c:f2:2e:b0:cd:fd:5a:
e1:25:42:ed:8a:e3:75:d5:5e:c0:17:61:16:e6:bd:48:96:04:
c1:74:e4:ab:cb:71:e3:28:e0:00:86:54:c9:66:04:cb:38:56:
96:87:9c:ae:17:34:24:ba:f1:b3:79:a1:d8:e5:18:e4:ac:38:
04:ea:00:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:08:08 2026 by rpki-client